Projects sharing features with Privatezilla

This project is an administrative utility suite designed to optimize Windows 11 environments through automated script execution. It functions by modifying core system configurations, removing pre-installed software packages, and terminating non-essential background processes to reclaim system resources and storage space. The tool distinguishes itself by providing a structured approach to privacy management and system maintenance. It programmatically updates registry keys and system settings to disable telemetry and background data collection, while offering state-reversion capabilities that a

SophiApp is a suite of specialized tools designed for removing pre-installed software, installing system runtimes, optimizing operating system performance, and hardening privacy on Windows 10 and 11. It includes a dedicated bloatware removal tool, a dependency installer for runtimes and codecs, and a privacy hardening suite to restrict data collection. The project features an optimization toolkit and registry tweaker that apply configuration changes to customize system behavior, appearance, and performance. These tools use a graphical interface to modify registry values, manage theme personal

Bloatynosy is a unified Windows system management tool that removes pre-installed bloatware, manages optional features, configures privacy settings, cleans residual files, and controls Windows updates. It operates through a core system interaction layer that leverages Appx, DISM, PowerShell, Registry, COM, Task Scheduler, and Windows Update APIs to apply configuration changes and manage system state. The tool provides a streamlined post-install and ongoing configuration experience, guiding users through initial setup to skip unwanted prompts and configure privacy early. It suppresses intrusiv

WindowsSpyBlocker is a suite of utilities designed to stop operating system data collection and tracking by applying firewall rules, hosts file blocks, and telemetry restrictions. It functions as a telemetry blocker and firewall manager that prevents the operating system from sending usage data to remote servers. The project features a specialized connectivity modifier for adjusting the network connectivity status indicator to prevent external reporting. It includes a network traffic auditor to capture and analyze system traffic to identify spying activities, alongside a manager for DNS and h

Winscript is a modular configuration framework designed for the administration and hardening of Windows environments. It utilizes script-based task orchestration to automate system setup, privacy enforcement, and performance tuning through direct interaction with system APIs and registry keys. The project distinguishes itself by providing a unified toolkit that combines OS deployment automation with bulk software provisioning. It generates unattended installation files to bypass hardware requirements and manual setup prompts, while simultaneously managing the silent installation of third-part

Windows Hardening is a PowerShell-based automation framework designed for security assessment and configuration management within Windows environments. It provides a suite of administrative utilities to enforce industry-standard security benchmarks, audit system compliance, and reduce the overall attack surface of host machines. The project distinguishes itself by offering specialized capabilities for enterprise-wide configuration management, including the ability to transform security findings into deployable group policy objects. It also integrates system state management, allowing administ

Aliucord is a modified version of the Discord Android application that functions as a plugin-based app extender. It allows for the installation of third-party plugins and deep customization of the mobile client without requiring a full rebuild of the binary. The project provides a framework for loading external code modules at runtime and includes a management system for installing and updating these extensions. It features a dedicated telemetry blocker designed to prevent the application from sending tracking and analytics data to remote servers. Additional capabilities include a crash logg

Windows10Debloater is a PowerShell-based utility designed to automate the removal of pre-installed software and the modification of system settings on Windows operating systems. It functions as a configuration manager that streamlines the desktop environment by uninstalling bundled applications and adjusting background services to reduce resource consumption. The tool distinguishes itself by providing a centralized orchestration layer for system hardening and privacy management. It allows users to restrict diagnostic data collection and block telemetry services, effectively limiting backgroun

Cromite is a privacy-focused browser built as a fork of Chromium that embeds a network-level content blocking engine to intercept advertisements, pop-ups, and tracking scripts before they reach the page. It applies community-maintained public filter lists directly within the browser, eliminating the need for external extensions, and uses a curated patch system applied to the Chromium source tree at build time to add or modify features without maintaining a separate codebase. The browser is hardened against tracking and data leakage through a comprehensive set of privacy and security measures.

Re-imagining Windows like a minimal OS install, already debloated with minimal impact for most functionality.

UnattendedWinstall is an OS deployment automation tool and unattended installation generator for Windows. It creates answer files and configuration mappings to automate the operating system setup process, enabling a clean installation without manual intervention. The tool provides specialized capabilities for bypassing hardware requirement checks during setup. It further allows for the injection of customized registry tweaks and system-wide settings directly into the installation image to modify OS behavior. The framework covers broad system optimization and hardening, including the removal

ThisIsWin11 is a suite of utilities and scripts designed for Windows 11 that functions as a bloatware remover, operating system customization tool, package manager interface, and system automation suite. Its primary purpose is to identify and delete factory-installed applications to reclaim system resources and modify system behavior and visual styles. The project provides a centralized control panel for managing obscure system settings and personalizing visual interface elements. It leverages script-based automation to apply wide-scale configurations and utilizes registry-based modifications

Simplewall is an application firewall manager and network traffic filter that provides a graphical interface for the Windows Filtering Platform. It controls inbound and outbound network access for individual programs and services by intercepting and filtering traffic at the kernel level. The project identifies specific binaries using file hashes to prevent spoofing and allows users to define custom firewall rules based on IP addresses, CIDR ranges, and port numbers. It includes a system for blocking operating system telemetry and managing blocklists of known malicious IP addresses. The tool

Windows-privesc-check is an automated security auditing tool designed to identify misconfigurations and vulnerabilities that may allow for unauthorized privilege escalation on Windows systems. It functions by scanning local system configurations, including file system permissions, registry settings, and service configurations, to detect security weaknesses that could lead to elevated administrative access. The tool distinguishes itself by providing both local auditing and remote assessment capabilities. It can query remote Windows hosts to enumerate network shares, user accounts, and domain t

Ungoogled Chromium is a desktop web browser derived from the open-source Chromium codebase, modified to remove all background communication with external services and proprietary dependencies. It functions as a privacy-focused distribution that ensures user data remains local by eliminating telemetry hooks and data collection integrations. The project distinguishes itself through extensive source-code pruning and domain-substitution patching, which replace hardcoded service URLs with non-functional placeholders to prevent unauthorized data transmission. It further hardens the browser runtime

This project provides a collection of tools for deploying, activating, and managing volume-licensed Microsoft Office suites on macOS, supporting versions from 2011 through LTSC 2024. It handles the full lifecycle of Office installation and licensing, including the ability to install a complete Office suite as a single package and activate it using volume license serializers that bypass individual product keys or Microsoft accounts. The project includes capabilities for troubleshooting and repairing broken Office installations by cleaning remnants of previous versions using official Microsoft

Winhance is a graphical tool for managing and optimizing Windows environments, providing a unified interface for removing pre-installed bloatware, applying performance and privacy tweaks, backing up and restoring system settings, and installing third-party applications through the WinGet package manager. It operates as a portable executable that can run without writing to system directories, and it supports exporting and importing its configuration as structured JSON files for easy migration across systems. The tool distinguishes itself by combining system optimization with deployment capabil

This project is a security hardening guide and privacy configuration manual for macOS. It provides a comprehensive set of instructions for configuring system settings to improve privacy, reduce the attack surface, and implement a malware defense framework. The guide covers technical methods for validating software notarization, verifying application sandboxing, and auditing system activity. It distinguishes itself by providing detailed workflows for restricting high-risk features and applying advanced security configurations to protect the operating system. The documentation covers several k

This project is a comprehensive security hardening and privacy management guide for macOS. It provides a set of instructions and checklists for reducing the system attack surface through manual configuration, policy enforcement, and a layered defense strategy. The guide emphasizes a system auditing framework, using binary analysis, system logs, and packet inspection to verify that security controls and application sandboxing are functioning as intended. It offers tool-agnostic recommendations, defining security goals while allowing users to select their own third-party software for implementa

Harden-Windows-Security is a security hardening tool and framework designed to reduce the attack surface of the Windows operating system through policy enforcement. It provides a collection of security presets and templates to implement official hardening standards across multiple devices. The project distinguishes itself through a comprehensive execution control system, featuring a manager for Windows Application Control and a kernel protection suite. It implements strict trust models, including kernel-mode driver whitelisting, signed policy implementation on the EFI partition, and code inte

Universal Android Debloater Next Generation is a cross-platform desktop application for removing pre-installed system applications from Android devices. It communicates with devices through the Android Debug Bridge (ADB) protocol, supporting both wired USB connections and wireless network pairing for debloating without a physical cable. The tool manages multiple connected Android devices simultaneously and provides package state backup and restore capabilities, allowing users to save and reapply the enabled or disabled state of system packages after factory resets or OS upgrades. The applicat

Surge is a network traffic routing and configuration system designed to categorize and steer network requests using curated rule sets, domain lists, and IP databases. It provides the data structures and filtering logic necessary to manage how application traffic is directed across proxies, direct connections, or regional gateways. The project distinguishes itself through granular traffic identification and steering. It identifies network requests by matching them against system process names, user-agent strings, and geographic IP ranges to apply specific routing policies. This allows for the

Project Nomad is a self-hosted survival suite and containerized offline operating environment. It provides a collection of essential tools, including a local retrieval-augmented generation system, an offline mapping server, and a local knowledge base for large language models, all designed to operate on air-gapped hardware. The system prioritizes total offline isolation to ensure telemetry-free operation. It enables private data analysis and semantic document querying through local-first vector storage and offline model execution, keeping all data on internal hardware without requiring intern

SpotX is a desktop client patcher designed to modify the Spotify application. It functions as an ad-blocking modifier and UI customizer that removes advertisements and promotional content from the music player. The project includes tools to disable automatic updates, ensuring that custom patches and visual themes remain active. It also provides a telemetry blocking patch to prevent the application from sending usage data and analytics to the service provider. The tool enables interface customization to hide specific sections, such as podcasts and audiobooks, from the homepage. These modifica

Azure Linux is a general purpose Linux operating system optimized for virtual machines and containers within the Azure cloud environment. It serves as a hardened cloud operating system designed to reduce the attack surface for deployments across virtualized cloud environments and bare-metal platforms. The project utilizes a declarative Linux build system that employs configuration overlays to modify distribution packages. This approach allows for the customization of system components and the generation of package specifications without forking the base upstream source. The distribution cove

PrivescCheck is a PowerShell-based security auditing tool designed to scan Windows configurations for potential privilege escalation paths and local host vulnerabilities. It functions as a vulnerability assessment utility that analyzes system settings and registry configurations to identify weaknesses that could allow unauthorized administrative access. The tool automates internal security reconnaissance and post-exploitation data collection to gather environmental information. It serves as a security compliance reporter by exporting scan results into structured formats, including HTML, CSV,

This project is a collection of automation scripts and tools designed to optimize Windows 10. It functions as a debloat script and configuration tool used to remove preinstalled applications and disable built-in features to improve system performance. The tool provides a mechanism for modifying system settings and reducing background service overhead. It automates the removal of bloatware and the deactivation of non-essential functions to minimize resource usage and recover system resources. The project covers system provisioning and performance tuning through registry modifications, policy-